Commit fb9e0da0 authored by Boxiang Sun's avatar Boxiang Sun

Change the INPUT chain from DROP to ACCEPT

Incomming connection is not a problem for the shacache work
parent 4348a85a
...@@ -538,9 +538,9 @@ ...@@ -538,9 +538,9 @@
destination: slap.vifib.com destination: slap.vifib.com
jump: ACCEPT jump: ACCEPT
- name: DROP INPUT - name: ACCEPT INPUT
iptables: iptables:
policy: DROP policy: ACCEPT
chain: INPUT chain: INPUT
- name: DROP OUTPUT - name: DROP OUTPUT
...@@ -548,10 +548,11 @@ ...@@ -548,10 +548,11 @@
policy: DROP policy: DROP
chain: OUTPUT chain: OUTPUT
- name: DROP IPV6 INPUT # Incomming connection is not a problem for the shacache work
- name: ACCEPT IPV6 INPUT
iptables: iptables:
ip_version: ipv6 ip_version: ipv6
policy: DROP policy: ACCEPT
chain: INPUT chain: INPUT
- name: DROP IPV6 OUTPUT - name: DROP IPV6 OUTPUT
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment